$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898.cer File: 1b8f9be3-65c4-421d-a760-278a00443898.cer (raw, json) Hash identifier: IJ/xMBV30AP97XMA8+PKP6DYtsB/i/D46VEz9BOkD+8= Subject key identifier: 7B:FF:06:6B:4A:BB:CB:E3:37:A4:49:80:74:3E:B3:F7:0B:D6:C5:1B Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE Certificate issuer: /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Certificate serial: 010D0C9F43285842CFAC9B472A4765169A0FF540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/1b8f9be3-65c4-421d-a760-278a00443898.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Aug 2023 00:45:22 +0000 Certificate not after: Mon 10 Nov 2025 01:45:22 +0000 Subordinate resources: AS: 63020 IP: 141.193.144.0/22 IP: 2602:ff14::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 Mar 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:cf:ac:9b:47:2a:47:65:16:9a:0f:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415 Validity Not Before: Aug 8 00:45:22 2023 GMT Not After : Nov 10 01:45:22 2025 GMT Subject: CN=1b8f9be3-65c4-421d-a760-278a00443898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6f:47:0a:d1:8c:53:ba:7c:7a:a8:6b:4a:7f: cc:f4:8d:e8:d1:8b:b8:a2:87:4a:b0:07:20:0c:9e: d4:8f:6d:48:74:4c:b5:36:d1:80:e2:26:40:7e:49: e5:50:db:0b:f4:87:94:28:f0:00:90:e0:aa:7f:af: ef:92:9d:80:14:e9:d0:a1:e2:0a:29:b4:c3:db:b9: d7:ae:da:9b:b9:cf:47:76:21:fb:fc:a3:e8:eb:68: d5:08:db:dc:e5:18:bf:3e:43:46:68:41:a2:3b:c5: 72:cb:2c:19:30:df:c2:1b:f4:86:ce:94:c8:f8:b5: 77:c5:48:11:d8:96:7d:09:f9:1f:b4:3a:a9:53:61: 2b:18:38:38:a7:ef:4e:d7:58:1c:4c:82:16:17:76: 62:f9:53:bf:8c:09:01:3e:2e:1a:11:b6:33:c7:04: 60:fa:93:45:0a:4e:f2:e0:75:90:e9:0f:fc:40:57: cb:5e:69:8a:bd:c0:7a:6b:e8:7c:70:51:22:80:cb: e8:78:80:ef:d0:3e:f3:e0:bd:22:95:c3:9e:e4:a0: 76:f5:51:0a:85:cd:1c:09:85:24:7c:54:7a:f9:30: a1:30:dd:47:59:1e:a0:c2:c7:d7:cb:78:79:23:0b: 74:e6:a9:4b:ca:0e:6f:6b:04:87:40:c4:50:da:48: cd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FF:06:6B:4A:BB:CB:E3:37:A4:49:80:74:3E:B3:F7:0B:D6:C5:1B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/1b8f9be3-65c4-421d-a760-278a00443898.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl X509v3 Authority Key Identifier: keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer sbgp-ipAddrBlock: critical IPv4: 141.193.144.0/22 IPv6: 2602:ff14::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63020 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ce:bd:e9:90:8f:69:25:44:74:ad:f3:3c:81:b9:1a:df:3f: c8:99:22:52:b3:e2:1b:a5:1d:5a:bf:d6:5e:14:e9:ba:b3:19: f7:98:45:43:fb:28:42:2d:7b:ad:dc:91:27:2e:0a:06:f0:bd: 26:09:a3:29:e3:5d:92:50:f5:6a:c4:7a:74:16:0b:81:06:83: f0:78:7b:a4:72:d1:1b:ed:62:49:be:51:bf:09:12:91:24:4d: 3d:76:6b:b1:3d:22:9f:6a:72:a9:6b:c7:9d:4d:ea:d9:d4:d2: 90:80:93:57:a2:cb:8b:4f:78:bd:d3:af:68:96:1b:32:91:ad: 50:94:b4:39:24:e0:0f:4f:4f:16:2c:c4:1b:a9:0d:62:86:54: 56:ed:0f:30:c4:4d:af:9b:7c:20:51:2a:b3:a8:b6:fc:a6:7a: f2:5c:20:ec:b0:97:e8:4d:a2:51:b8:d7:5f:22:8c:29:48:84: e7:a8:f9:45:f2:97:19:fd:b0:79:b8:a4:62:e2:42:8d:98:06: 96:53:22:a5:bb:67:62:19:ed:6d:7b:ea:69:de:cf:94:79:16: c2:85:39:40:8d:3a:1d:72:6b:3f:91:db:bf:28:71:1d:4d:86: 9e:f2:53:b9:ca:61:dd:6b:31:b5:a7:17:40:a7:8d:a3:80:78: 7e:20:fc:60 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWELPrJtHKkdlFpoP9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4 NDE1MB4XDTIzMDgwODAwNDUyMloXDTI1MTExMDAxNDUyMlowLzEtMCsGA1UEAxMk MWI4ZjliZTMtNjVjNC00MjFkLWE3NjAtMjc4YTAwNDQzODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG9HCtGMU7p8eqhrSn/M9I3o0Yu4oodKsAcg DJ7Uj21IdEy1NtGA4iZAfknlUNsL9IeUKPAAkOCqf6/vkp2AFOnQoeIKKbTD27nX rtqbuc9HdiH7/KPo62jVCNvc5Ri/PkNGaEGiO8VyyywZMN/CG/SGzpTI+LV3xUgR 2JZ9CfkftDqpU2ErGDg4p+9O11gcTIIWF3Zi+VO/jAkBPi4aEbYzxwRg+pNFCk7y 4HWQ6Q/8QFfLXmmKvcB6a+h8cFEigMvoeIDv0D7z4L0ilcOe5KB29VEKhc0cCYUk fFR6+TChMN1HWR6gwsfXy3h5Iwt05qlLyg5vawSHQMRQ2kjNQQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFHv/BmtKu8vjN6RJgHQ+s/cL1sUbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x YjhmOWJlMy02NWM0LTQyMWQtYTc2MC0yNzhhMDA0NDM4OTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzFiOGY5YmUzLTY1YzQtNDIxZC1h NzYwLTI3OGEwMDQ0Mzg5OC8xYjhmOWJlMy02NWM0LTQyMWQtYTc2MC0yNzhhMDA0 NDM4OTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5 OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2 ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKNwZAwDgQCAAIwCAMGBCYC/xQAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwD2LDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGzr3pkI9pJUR0rfM8gbka3z/I mSJSs+IbpR1av9ZeFOm6sxn3mEVD+yhCLXut3JEnLgoG8L0mCaMp412SUPVqxHp0 FguBBoPweHukctEb7WJJvlG/CRKRJE09dmuxPSKfanKpa8edTerZ1NKQgJNXosuL T3i9069olhsyka1QlLQ5JOAPT08WLMQbqQ1ihlRW7Q8wxE2vm3wgUSqzqLb8pnry XCDssJfoTaJRuNdfIowpSITnqPlF8pcZ/bB5uKRi4kKNmAaWUyKlu2diGe1te+pp 3s+UeRbChTlAjTodcms/kdu/KHEdTYae8lO5ymHdazG1pxdAp42jgHh+IPxg -----END CERTIFICATE-----Generated at Fri Mar 29 02:54:13 2024 by rpki-client on console-fra.rpki-client.org